Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netty | Oct 2, 2019 | Sep 26, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Sep 26, 2019 |
| Red_hat Jboss_eap | — | — | Apr 6, 2021 | Sep 26, 2019 |
| Ubuntu | — | Upgrade libnetty-3.9-java | Sep 23, 2020 | Sep 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub